Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/NJRgg1ImglCDt3lkFF00SgPcVCI.roa
File: NJRgg1ImglCDt3lkFF00SgPcVCI.roa (raw, json)
Hash identifier: BCUIn0KQFBYv8xmwb3+x+o/H7HivOykTV0rZEGh5nmw=
Subject key identifier: 34:94:60:83:52:26:82:50:83:B7:79:64:14:5D:34:4A:03:DC:54:22
Certificate issuer: /CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Certificate serial: 018570F0789E7648590378080BA6546B1BB2
Authority key identifier: 14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/NJRgg1ImglCDt3lkFF00SgPcVCI.roa
Signing time: Mon 02 Jan 2023 05:24:45 +0000
ROA not before: Mon 02 Jan 2023 05:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34863
IP address blocks: 62.106.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:78:9e:76:48:59:03:78:08:0b:a6:54:6b:1b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14405d209aecc384929a0ad964b4dbcd5c0468c2
Validity
Not Before: Jan 2 05:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=349460835226825083b77964145d344a03dc5422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1f:fb:af:56:90:79:cd:d9:3c:bf:40:4c:5a:
e9:04:e9:56:77:21:ba:8c:68:b0:f1:0e:0b:6f:09:
32:5a:b6:c3:ec:dd:5a:cd:6e:1d:b5:5b:01:f9:64:
e8:87:b5:85:ee:2f:a9:c7:97:52:f7:8e:d0:63:d9:
42:de:54:cf:6d:ab:80:c3:fd:5c:e7:d3:9d:c7:e0:
a8:21:45:73:ce:90:8c:c7:a1:db:d8:ca:f3:0e:ce:
35:37:c7:1d:71:db:ad:b6:79:cc:33:5e:5c:e3:c0:
72:ae:fb:2b:39:aa:ce:cb:99:25:6c:c3:4b:a7:4c:
a5:1c:38:bd:6c:e7:26:21:0b:9e:16:e0:43:32:47:
9b:9f:cc:12:d1:eb:a1:ce:a6:4d:6d:8e:03:43:0b:
61:0b:f6:45:cf:a6:ee:b3:6b:40:3c:ef:56:0e:75:
6d:68:c2:ab:0a:e1:30:af:ef:f3:33:d4:3f:02:ee:
57:7a:42:99:1b:c1:28:8b:41:72:66:5e:b7:b3:0c:
d9:9d:46:66:f3:90:3e:12:d1:80:2d:e2:77:8f:5f:
67:fb:11:2d:4f:f9:23:79:c1:7e:fd:e7:78:0f:96:
d8:7a:26:93:0f:cc:b8:4d:f3:a2:a2:32:9d:a5:c0:
9f:05:df:09:6e:ec:0f:cc:e0:f7:b3:a0:35:75:8a:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:60:83:52:26:82:50:83:B7:79:64:14:5D:34:4A:03:DC:54:22
X509v3 Authority Key Identifier:
keyid:14:40:5D:20:9A:EC:C3:84:92:9A:0A:D9:64:B4:DB:CD:5C:04:68:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEBdIJrsw4SSmgrZZLTbzVwEaMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/NJRgg1ImglCDt3lkFF00SgPcVCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bcafd8-8014-4131-b71b-74c3a9789a1c/1/FEBdIJrsw4SSmgrZZLTbzVwEaMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ce:6e:cb:96:ba:f6:b5:5f:ba:e4:8d:e9:66:8b:53:3a:70:
59:a2:dd:2c:a3:f3:6b:cb:52:95:35:ee:22:06:c8:3e:f3:64:
03:b4:b0:f7:75:01:7f:e4:bb:d7:af:0e:20:c9:2c:0b:e5:90:
21:90:00:d1:58:dd:ed:a5:c6:e0:21:19:d8:59:63:45:c6:e3:
c6:15:bc:a4:e5:1c:64:47:ba:fd:a7:4b:75:7e:e3:eb:f5:cc:
0e:e2:b3:2b:56:09:d5:a1:69:fd:ce:18:a0:8c:dc:c6:d8:82:
b5:05:7c:b3:ea:e1:04:5a:0d:e0:f7:1f:54:0f:69:61:3d:df:
8f:3d:95:fa:4d:31:1a:1e:2c:0b:f4:67:52:e3:7a:c1:44:34:
fc:d4:7d:9a:64:3f:da:71:da:25:78:17:f7:09:c0:96:0c:87:
f6:c5:29:27:47:b4:70:65:23:0c:5f:8d:a5:b6:18:f5:41:bc:
8f:ff:06:da:c2:0e:ce:f0:8e:57:a6:51:6b:83:7d:18:aa:a3:
76:df:eb:76:3f:18:85:69:f6:b0:d2:3a:f5:2e:e7:61:4b:e7:
d7:78:a5:8c:b0:ae:3e:12:3c:78:ae:67:c3:86:48:a6:00:b4:
fb:cb:32:70:3b:6a:7a:45:1b:1e:7e:e8:fa:23:c8:d3:f3:28:
f3:21:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:24 2024 by rpki-client on console-ams.rpki-client.org